DOCKET NO.: MSFT-103 / 127334.6 



PATENT 



encrypted digital content being decrypt-ab^e according to a decryption key (KD) obtained from 
the license; 



a content/package 

package; and 

license acquisition 
for pro\dding the license. 



D identifying one of the digital content and the 



information including a location of a license provider 



107. The package of clajm 106 wherein the license acquisition information is in 
an unencrypted form. 

108. The package of clai|iil06 wherein the Ucense provider location is a 
network address. 

109. The package of claim 108 wherein the Hcense provider location is an 
Internet address. 



110. The package of jplain i 
provider having a public key and a private 1 
provider public key. 



106 wherein the package is provided by a content 
ey, the package further including the content 



111. 



The package of claim 



110 wherein the content provider public key is 
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encrypted according to the decryption key (KD) 



112. The package 
key is signed by the content provid 
content provider public key prevents 



of claim 1 1 1 wherein the encrypted content provider public 
. ^r private key^ and wherein alteration of the encrypted 
validation of the package. 



113. The package 
signed by the content provider pn^ate 
prevents validation of the package 



of claim 110 wherein the content provider public key is 
key, wherein alteration of the content provider public key 



114. The packag e of claim 106 further comprising a key ID identifying the 
decryption key (KD). 



115. The package of claim 1 06 wherein the package is provided by a content 
provider authorized by a root source to provide the package, the package further comprising a 
certificate from the root source indicating that the content provider has authority from the root 
source to provide the package. 



116. The package 
and a private key, and wherein the 




of claim 115 wherein the content provider has a public key 
ertificate includes the public key of the content provider. 
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117. The package of (jlaim 116 wherein the root source has a public key and a 

1 

private key, wherein the certificate is signed with the private key of the root source, and wherein 

i 

the pubUc key of the root source must be obtained to decrypt the encrypted signature. 



118. The package of claim 106 wherein the package is provided by a content 
provider authorized by an intermediary s ource to provide the package, the intermediary source in 

authorize the content provider, the package further 
comprising a first certificate from the rojot source indicating that the intermediary source has 
authority from the root source to author ze the content provider, and a second certificate from 
the intermediary source indicating that Ihe content provider has authority from the intermediary 



turn being authorized by a root source tc 



source to provide the package. 



1 19. The package of claim 1 1 8 wherein the content provider has a public key 
and a private key, wherein the intermediary source has a public key and a private key, wherein 
the first certificate includes the public ksy of the intermediary source, and wherein the second 
certificate includes the public key of the content provider. 

f 

120. The package of cl aim 1 1 9 wherein the root source has a public key and a 
private key, wherein the first certificate is signed with the private key of the root source, wherein 
the second certificate is signed with the private key of the intermediary source, wherein the 



public key of the root source must be obtained to decrypt the encrypted signature of the first 
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certificate, and wherein the public key of the intermediary source is obtained fi-om the first 
certificate to decrypt the encrypted sijpiature of the second certificate. 

A 



121. A computer-readable medium having stored thereon a data structure 
corresponding to a digital content package, the data structure including: 



a first 



: data field containing encrypted digital content to be rendered in 
accordance with a corresponding digital license, the data stmcture being separate and apart fi*om 
the license, the encrypted digital content being decrypt-able according to a decryption key (KD) 
obtained fi*om the license; 

a sec md data field containing a content/package ED identifying one of the 
digital content and the package; and 

a thi 'd data field containing license acquisition information including a 
location of a license provic er for providing the Ucense. 

122. The data structure of claim 121 wherein the license acquisition 
information is in an unencrypted-form. 



123. /Thp da):a structure of claim 121 wherein the license provider location is a 
network address; 



The data structure of claim 123 wherein the license provider location is an 
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125. The data structure 
content provider having a pubHc key 
fourth data field containing the contenti 



of claim 121 wherein the data structure is provided by a 

private key, the data structure further including a 
6vider public key. 




9' 



126. The data str iicture of claim 125 wherein the content provider public key is 



encrypted according to the decrypt 



on key (KD). 



127. The dati structure of claim 126 wherein the encrypted content provider 
public key is signed by the content provider private key, and wherein alteration of the encrypted 
content provider public key prevents validation of the data structure. 



^ ^^'^ 128. The datja structure of claim 125 wherein the content provider public key is 
signed by the content providef private key, wherein alteration of the content provider public key 



prevents validation of the data 



structure. 



129. The data structure ojr claim 121 further comprising a fourth data field 
containing a key ID identifying the decryption key (KD). 



130. The data structure of claim 121 wherein the data structure is provided by a 
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content provider authorized by a root source to provide the data structure, the data structure 
further comprising a fourth dat| field containing a certificate from the root source indicating that 
the content provider has authoiity from the root source to provide the data structure. 



131. The data structure of claim 1 30 wherein the content provider has a public 
key and a private key, and wherein the certificate includes the public key of the content provider. 



and a private key, wherein tqe 
wherein the public key of thfe 



132. The d^ta structure of claim 131 wherein the root source has a public key 
certificate is signed with the private key of the root source, and 
root source must be obtained to decrypt the encrypted signature. 



Pita structure of claim 121 wherein the data structure is provided by a 
Dy an intermediary source to provide the data structure, the 
)eing authorized by a root source to authorize the content provider, 
nprising a fourth data field containing a first certificate from the root 
ermediary source has authority from the root source to authorize the 
data field containing a second certificate from the intermediary 
itent provider has authority from the intermediary source to provide 



134. The data stmcture of claim 133 wherein the content provider has a public 



# 
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key and a private key, wherein the intermediary source has a pubHc key and a private key, 
wherein the first certificate includes the public key of the intermediary source, and wherein the 
second certificate includes the public key of the content provider. 

135. The CMta structure of claim 134 wherein the root source has a public key 
and a private key, wherem the first certificate is signed with the private key of the root source, 
wherein the second ceiiificate is signed with the private key of the intermediary source, wherein 
the public key of the root source must be obtained to decrypt the encrypted signature of the first 
certificate, and wnerein the public key of the intermediary source is obtained fi*om the first 
certificate to decrypt the encrypted signature of the second certificate. 



In the Abstract: 



Please delete the Abstract and insert the following: 



~A digital content package includes encrypted digital content to be rendered in 
accordance with a corresponding digital license and is separate and apart from the license. The 
encrypted digital content is decrypt-able according to a decryption key (KD) obtained from the 
license. The package also includes a content/package ED that identifies one of the digital content 
and the package, and license acquisition information including a location of a license provider 
for providing the license,— 



Remarks 



